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Top Stories 

• Scottrade officials reported October 2 that the contact information for 4.6 million 
customers was compromised after internal and Federal investigations reportedly revealed 
unauthorized access to systems housing the information. - Krebs on Security (See item 4) 

• Several roadways, school districts, and apartment complexes in South Carolina were closed 
or damaged October 4 due to a series of storms and Hurricane Joaquin which dumped rain 
and caused flooding in the State. - Wall Street Journal (See item 5) 

• Officials reported October 3 that nearly 400 students and teachers have been affected by an 
ongoing norovirus outbreak in 1 1 northern Nevada schools. - Associated Press (See 

item 19) 

• Officials reported that a 4-alarm fire October 4 destroyed Cho Senter market in California, 
prompted an evacuation of five nearby mobile homes, and temporarily closed dozens of 
surrounding businesses. - San Jose Mercury News (See item 22) 
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Energy Sector 



Nothing to report 

Chemical Industry Sector 

1. October 2, Houston Chronicle - (Texas) 3 of 4 injured in Pasadena plant fire 
released from hospital. Officials reported October 2 that 4 employees were injured at 
a SunEdison silicon plant in Pasadena, Texas, after a chemical leak involving silane, 
caused a fire and explosion at the facility. Fire crews contained the fire and an 
investigation is ongoing to determine the exact cause of the accident. 

Source: http://www.chron.com/neighborhood/pasadena-news/article/4-hurt-in- 
explosion-at-Pasadena-chemical-plant-6545329.php 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

Critical Manufacturing Sector 

2. October 5, U.S. Department of Labor - (Pennsylvania) OSHA finds improperly 
equipped furnace led to deadly explosion at TIMET ’s Morgantown, Pennsylvania, 
manufacturing plant. The Occupational Safety and Health Administration (OSHA) 
cited Morgantown, Pennsylvania-based Titanium Metals Corporation (TIMET) 
September 25 for 8 serious and 1 other-than-serious safety violation following a March 
explosion that killed 1 worker and injured 3 others. Proposed penalties total $42,000 
after OSHA found that the plant’s electron beam furnace was poorly equipped to detect 
and prevent hydrogen gas buildup, among other violations. 

Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES&p id=28836 

3. October 2, AutoBlog.com - (National) Honda recalling 143K Civic, Fit models for 
CVT. Honda issued a recall for 143,676 model year 2014 - 2015 Civic and 2015 Fit 
vehicles due to an issue with continuously variable transmission (CVT) operation 
modes in which high hydraulic pressure could cause drive pulley shafts to break, 
leading to a loss of acceleration or a situation in which the front wheels lock up. 

Source: http://www.autoblog.com/2015/10/02/honda-recall-143k-civic-fit-cvt/ 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

4. October 2, Krebs on Security - (National) Scottrade breach hits 4.6 million 
customers. Scottrade officials reported October 2 that contact information and possibly 
Social Security numbers of 4.6 million customers were compromised after internal and 
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Federal investigations reportedly revealed unauthorized access to systems housing the 
information between late 2013 - early 2014. The company does not believe any Social 
Security numbers were accessed, and that the breach focused solely on contact 
information. 

Source: https://krebsonsecurity.com/2015/10/scottrade-breach-hits-4-6-million- 
customers/ 



Transportation Systems Sector 

5. October 5, Wall Street Journal - (South Carolina) Flooding from Hurricane Joaquin 
shuts roads, schools in South Carolina. A 70-mile stretch of Interstate 95 was closed 
October 4, along with several other roadways and bridges in South Carolina due to a 
series of storms and Hurricane Joaquin which dumped rain and caused flooding in the 
State. Universities and 19 local school systems were closed while a number of 
apartment complexes flooded. 

Source: http://www.wsi.com/articles/obama-declares-state-of-emergency-in-south- 
carolina-as-hurricane-joaquin-adds-to-flooding- 1443972 189 

6. October 4, KTVI 2 St. Louis - (Missouri) Fatal wrong- way crash shuts down 1-44 
overnight. Westbound lanes of Interstate 44 at Pine reopened October 4 after shutting 
down for nearly 4 hours overnight while crews responded to a wrong-way accident that 
killed 1 and injured 2 others. 

Source: http://fox2now.com/2015/10/04/fatal-crash-shuts-down-i-44-for-several-hours- 
overnight/ 

7. October 3, KXAS 5 Fort Worth - (Texas) Fatal wreck closes NB I-35E in Denton. 
Northbound lanes of Interstate 35E in Denton were shut down for more than 6 hours 
October 3 while emergency crews responded to a fatal car crash that occurred when a 
woman lost control of her vehicle and struck a truck. 

Source: http://www.nbcdfw.com/news/local/Denton-Accident-Shuts-Down-I-35-NB- 
330514371.html 

8. October 3, WCTI 12 New Bern - (North Carolina) Ocean overwash shuts down 
Highway 12, Hatteras ferry suspended. Highway 12 on Ocracoke Island in North 
Carolina was closed October 3 while crews spent several hours assessing and repairing 
damage caused by flooding following heavy rains. Officials also reported that Hatteras 
ferry will be out of service until further notice. 

Source: http://www.wctil2.com/news/ocean-overwash-shuts-down-highway-12- 
hatteras-ferry-suspended/35635654 

9. October 3, USA Today; Greenville News - (South Carolina) 4 killed in S.C. plane 
crash on way to see Clemson-Notre Dame game. Four men died in a single-engine 
plane crash on the bank of Lake Hartwell, South Carolina, while headed to Clemson 
from Warsaw, Indiana, October 2. Officials are investigating the cause of the accident. 
Source: http://www.usatodav.com/storv/news/nation-now/2015/10/03/4-killed-sc- 
plane-crash-way-see-clemson-notre-dame-game/73280016/ 
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Food and Agriculture Sector 



10. October 5, U.S. Food and Drug Administration - (National) Aspen Foods recalls 
frozen, raw, stuffed & breaded chicken products due to possible Salmonella 
Enteritidis contamination. The Food Safety and Inspection Service reported October 
2 that Chicago-based Aspen Foods expanded its July 15 recall to include an additional 
561,000 pounds of frozen, raw, stuffed, and breaded chicken products that appear to be 
ready-to-eat after intensified sampling revealed positive results for Salmonella 
Enteritidis. The products were shipped to stores and food service locations nationwide. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archi ve/20 1 5/recall- 101-2015 -release-expansion 

1 1 . October 3, U.S. Food and Drug Administration - (National) Texas Star Nut and Food 
Co., Inc. voluntarily recalls natural macadamia nuts and simply raw trail mix due 
to possible Salmonella contamination. Texas Star Nut and Food Co., Inc., issued a 
voluntary recall October 2 for its Nature’s Eats, Natural Macadamia Nuts products 
packaged in 6-ounce bags, and Southern Grove, Simply Raw Trail Mix products 
packaged in 8-ounce bags after routine sampling revealed that the items were 
potentially contaminated with Salmonella. The products were distributed to retail 
locations in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm465580.htm 

12. October 2, U.S. Food and Drug Administration - (National) Dean Foods of Decatur, 
Ind. issues allergy alert on undeclared milk in Sunkist Frozen Mango Fruit Sorbet 
Bars. Decatur, Indiana-based Dean Foods issued a voluntary recall October 2 for its 
Sunkist brand Frozen Mango Fruit Sorbet Bars - Gluten Free products due to 
misbranding after a manufacturing error that may have allowed a small amount of milk 
into its products. The item was sold by retailers in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm465554.htm 

Water and Wastewater Systems Sector 

13. October 4, Associated Press - (South Carolina) The latest: Many city of Columbia 
residents without water. The city of Columbia issued a boil water advisory for all of 
its 375,000 customers prior to announcing that the many residents may remain without 
water service for 3-4 days due to a rain storm that moved through South Carolina. 

The city of Cayce also issued a boil water advisory for residents due to the storm. 
Source: http://www.islandpacket.com/news/state/south-carolina/article37707141.html 

Healthcare and Public Health Sector 

14. October 2, Pittsburgh Tribune -Review - (Pennsylvania) VA Pittsburgh finds 
Legionella bacteria on 3 water fixtures. The U.S. Department of Veterans Affairs 
(VA) announced October 2 that a shower and two sinks at the VA Pittsburgh 
Healthcare System’s Oakland hospital in Pennsylvania tested positive for Fegionella 
bacteria. The hospital ordered the water fixture’s cultures to be analyzed and compared 
to cultures received from six infected patients who reportedly contracted Fegionnaires’ 



- 4 - 



disease from the hospital. 

Source: http://triblive.com/news/adminpage/9197545-74/hospital-bacteria-outbreak 



15. October 2, WVEC 13 Hampton - (Virginia) Hard drives with patient information 
stolen from Sentara Heart Hospital. Sentara Heart Hospital in Norfolk announced 
October 2 that the medical information of 1,040 patients may have been accessed after 
2 portable, unencrypted hard drives were taken from 2 electrophysiology labs in 
August. The hospital does not believe that the hard drives were taken specifically for 
identity fraud purposes and continues to investigate the theft. 

Source: http://www.13newsnow.com/storv/news/local/mvcitv/norfolk/2015/10/02/hard- 
drives-patient-information-stolen-sentara-heart -hospital/73225506/ 

For another story, see item 19 

Government Facilities Sector 

16. October 5, WSB 2 Atlanta - (Georgia) Power outages close schools in Habersham 
County. A widespread power outage, downed trees, and debris on roadways prompted 
the closure of Habersham and White County schools in Georgia October 5 following a 
band of storms over the weekend of October 3. 

Source: http://www.wsbtv.com/news/news/local/schools-closed-due-down-trees- 
power-outages-habers/nnttT/ 

17. October 4, KCRA 3 Sacramento - (California) 4 students arrested in Tuolumne 
County school shooting plot. Four students were arrested by authorities October 3 
after an investigation determined that the students were planning a mass shooting at 
Summerville High School in Tuolumne County after the suspects reportedly made 
threats against students and faculty September 30. Investigators uncovered detailed 
plans which included the names of would-be victims, locations, and methods of attack. 
Source: http://www.kcra.com/news/4-students-arrested-in-school-shooting- 
plot/35638052 

18. October 4, WCNC 36 Charlotte - (North Carolina) Overhang collapse injures 22 
people at band competition. At least 22 people were injured after a concrete overhang 
collapsed on students and parents at North Iredell High School in North Carolina 
October 3 during a regional band competition. 

Source: http://www.wcnc.com/storv/news/local/2015/10/03/overhang-collapse-iniures- 
25 -people-at-band-competition/73299 172/ 

19. October 3, Associated Press - (Nevada) Noro virus outbreak affects hundreds of 
Nevada students, teachers. Officials reported October 3 that nearly 400 students and 
teachers have been affected by a norovirus outbreak in 1 1 northern Nevada schools 
following the start of the outbreak September 16 at Reno Elementary School. Schools 
were ordered to sanitize and thoroughly clean the buildings, and sick students and 
adults were ordered to stay home for at least 72 hours until symptoms subsided. 

Source: http://www.foxnews.com/health/2015/10/Q3/norovirus-outbreak-affects- 
hundreds-nevada-students-teachers/ 
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For another story, see item 5 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

20. October 5, SC Magazine - (International) Zero day vulnerability found in VMware 
product. Researchers from 7 Elements discovered a VMware vCentre zero day 
vulnerability involving the deployment of the JMX/RMI service used in the 
management interface in which an attacker could gain unauthorized remote system 
access to the hosting server, leading to full enterprise environment compromise. 
VMware reported that it is working on releasing a patch to address the vulnerability. 
Source: http://www.scmagazineuk.com/zero-dav-vulnerability-found-in-vmware- 
product/article/442687/ 

21. October 3, Softpedia - (International) Fareit malware uses different file hash for 
each attack to avoid AV detection. Security researchers from Cisco’s Talos team 
discovered a new version of the Fareit trojan specializing in information stealing that 
changes its file hash with each infection. Researchers found only 23 shared common 
hashes out of 2,455 recorded samples, and determined that the samples communicated 
with only 2 command and control (C&C) servers. 

Source: http://news.softpedia.com/news/fareit-malware-uses-different-file-hash-for- 
each-attack-to-avoid-av-detection-493525.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 

22. October 5, San Jose Mercury News - (California) San Jose: Early morning four- 
alarm blaze destroys businesses and threatens trailer park. Officials reported that a 
4-alarm fire destroyed Cho Senter market in San Jose, prompted an evacuation of five 
nearby mobile homes, and temporarily closed dozens of surrounding businesses while 
fire crews extinguished the blaze October 4. The cause of the fire remains under 
investigation and authorities are assessing the total amount of damages. 

Source: http://www.mercurvnews.com/bay-area-news/ci 28919907/san-jose- 
firefighters-battle-4-alarm-grocery-store 
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23. October 3, Wisconsin State Journal - (Virginia) Pepper spray use causes hotel 
evacuation, arrest in Vienna. Officials reported October 3 that a Comfort Inn and 
Suites located in the town of Vienna, Virginia, was evacuated and an unknown number 
of guests were treated for chemical exposure after a Vermont man deployed pepper 
spray in his hotel room, allowing the fumes to travel through the building’ s ventilation 
system October 2. The man was arrested and charged and guests were allowed back 
into the hotel once it was ventilated. 

Source: http://host.madison.com/wsi/news/local/crime-and-courts/pepper-spray-use- 
causes-hotel-evacuation-arrest-tn-vienna/article dae79363-ee92-5e28-b875- 
d368da579b47.html 



24. October 2, LancasterOnline.com - (Pennsylvania) Damage to East Earl apartments 
is $225,000, Red Cross helping 10 people. An October 1 fire caused an estimated 
$225,000 worth of damage to an East Earl Township apartment building in Lancaster, 
displacing 10 residents. The fire reportedly began in the basement and authorities are 
investigating the cause. 

Source: http://lancasteronline.com/news/local/damage-to-east-earl-apartments-is-red- 
cross-helping-people/article efc 1 cc22-6824- 1 le5 -b 1 64- 1 f05e 1 a4b76a.html 

For another story, see item 5 

Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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